OpenSAML user discussion

[Scott Cantor <>]

> So then the entity needs to authenticate using some other 
> mechanism and then go to a SAML Authority to get a token 
> which it can provide to other systems. Doesn't this sound 
> like certificates?

Of course. But what other model are you contemplating? If you sent a name
and password inside a saml:AuthenticationQuery and expected an assertion
back, that's still exactly what you're describing above.

-- Scott